
Cloud Vulnerability DB
A community-led vulnerabilities database
A vulnerability has been identified in the Linux kernel (CVE-2025-39795) related to potential overflow in the block subsystem. The issue was discovered and disclosed on September 12, 2025, affecting the blkstacklimits() function where the chunk_sectors value check could lead to an overflow condition (NVD).
The vulnerability exists in the blkstacklimits() function of the Linux kernel's block subsystem. The issue occurs when checking if the t->chunksectors value is a multiple of the t->physicalblocksize value. The vulnerability arises because finding the chunksectors value in bytes may overflow the unsigned int which holds chunk_sectors. The fix involves modifying the check to be based on sectors instead of bytes (NVD).
An overflow in the block subsystem could potentially affect system stability and integrity. However, specific impact details have not been publicly disclosed in the available sources.
The vulnerability has been resolved in the Linux kernel through a patch that changes the chunk_sectors check to be based on sectors rather than bytes. Multiple kernel commits have been created to address this issue (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."